revengerat | baacdf22042a8c366b12cc0db7b0b9138b3a95a062a000d344f0b62be46059b8 | Triage

Submit
Reports

Overview

overview

Static

static

1

baacdf2204...8N.exe

windows7-x64

baacdf2204...8N.exe

windows10-2004-x64

Sharing

General

Target

baacdf22042a8c366b12cc0db7b0b9138b3a95a062a000d344f0b62be46059b8N.exe
Size

2.1MB
Sample

241128-w2k2ra1nfk
MD5

5d8b1d0b165e6c4b4d78bcf52fb99570
SHA1

01a30b1390af9daf7d24a6f7a9e28ee883d5b2ee
SHA256

baacdf22042a8c366b12cc0db7b0b9138b3a95a062a000d344f0b62be46059b8
SHA512

8b0508add284eb79bae3432225aad66759329b31dc5258dbbf76c1a7b0c7f847cbc10a51134348ccbdec74b84367cab855c3172d31916c9837965dd1bfe35695
SSDEEP

49152:PhxkP/I9K3pr4ZCOz5xLmKot5C7UzaxVlHAlImt4+O5XK2v0uV+w:AoQ3V4IGxLmKK4PA6E1GXzM4

Score

10^/10

revengerat discovery stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

baacdf22042a8c366b12cc0db7b0b9138b3a95a062a000d344f0b62be46059b8N.exe

Resource

win7-20240903-en

revengerat discovery stealer trojan

windows7-x64

15 signatures

120 seconds

Behavioral task

behavioral2

Sample

baacdf22042a8c366b12cc0db7b0b9138b3a95a062a000d344f0b62be46059b8N.exe

Resource

win10v2004-20241007-en

revengerat discovery stealer trojan

windows10-2004-x64

14 signatures

120 seconds

Malware Config

Targets

- Target
  
  baacdf22042a8c366b12cc0db7b0b9138b3a95a062a000d344f0b62be46059b8N.exe
- Size
  
  2.1MB
- MD5
  
  5d8b1d0b165e6c4b4d78bcf52fb99570
- SHA1
  
  01a30b1390af9daf7d24a6f7a9e28ee883d5b2ee
- SHA256
  
  baacdf22042a8c366b12cc0db7b0b9138b3a95a062a000d344f0b62be46059b8
- SHA512
  
  8b0508add284eb79bae3432225aad66759329b31dc5258dbbf76c1a7b0c7f847cbc10a51134348ccbdec74b84367cab855c3172d31916c9837965dd1bfe35695
- SSDEEP
  
  49152:PhxkP/I9K3pr4ZCOz5xLmKot5C7UzaxVlHAlImt4+O5XK2v0uV+w:AoQ3V4IGxLmKK4PA6E1GXzM4
Score

10^/10

revengerat discovery stealer trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- Revengerat family
  revengerat
- RevengeRat Executable
  stealer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

revengeratdiscoverystealertrojan

behavioral2

revengeratdiscoverystealertrojan

© 2018-2024

Terms | Privacy